file[.]exe | Triage™

General

Target
file.exe
Size 293KB
Sample230615-grfxqaeh2x
SHA256 1688dc9d9147e95bacc1b2a5ba0b3f48aafa697e7afa9795d94eddd842184fa7
MD5 fbf5e820015beac1f784c6db854d1dc1
SHA1 23980503881ceac05c66a45e77494aaed5e2303a
SHA512 680c4b3e5ac872592684479335098f22f85ce12bf17bcd3a152c15b61f4f6ef2c9b626f6e0e2eb7490e1b3a45a8c6ed4ca0a4a0327cfad86738ce902ba75a07a
SSDEEP 6144:wc3fwAmAaVXT3ud4/eTc/IjJn0lwRPiS0lWYI+:wuwxjVXTx/6/Jn0GS
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.exe

File Explorer

file.exe

.exe 293KB

file.exe

IMPHASH 7611227210652900d20c16ad7e91dc81
SHA256 1688dc9d9147e95bacc1b2a5ba0b3f48aafa697e7afa9795d94eddd842184fa7
MD5 fbf5e820015beac1f784c6db854d1dc1
SHA1 23980503881ceac05c66a45e77494aaed5e2303a
SHA512 680c4b3e5ac872592684479335098f22f85ce12bf17bcd3a152c15b61f4f6ef2c9b626f6e0e2eb7490e1b3a45a8c6ed4ca0a4a0327cfad86738ce902ba75a07a
SSDEEP 6144:wc3fwAmAaVXT3ud4/eTc/IjJn0lwRPiS0lWYI+:wuwxjVXTx/6/Jn0GS
MD5 SHA1 SHA512 SSDEEP

windows x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20639

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetConsoleAliasExesLengthA InterlockedIncrement WaitNamedPipeA GetCurrentProcess SetMailslotInfo GetModuleHandleW GetTickCount SetFileTime GlobalAlloc GetSystemDirectoryW SetFileShortNameW LoadLibraryW GetSystemPowerStatus GetCalendarInfoA GetFileAttributesA GetVolumePathNameA GetShortPathNameA DeleteFiber GetProcAddress AttachConsole MoveFileW SetComputerNameA EnterCriticalSection SetProcessAffinityMask WriteConsoleA InterlockedExchangeAdd DeleteTimerQueue FindFirstVolumeMountPointW BeginUpdateResourceA GetDiskFreeSpaceA AddAtomA GetPrivateProfileStructA FindNextFileA GetModuleHandleA OpenFileMappingW FreeEnvironmentStringsW GetCurrentDirectoryA GetShortPathNameW SetCalendarInfoA SetThreadAffinityMask EnumCalendarInfoExA EnumSystemLocalesW DeleteFileA GetVolumeNameForVolumeMountPointA SearchPathA ExitProcess GetLastError HeapFree GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException HeapAlloc IsProcessorFeaturePresent EncodePointer DecodePointer HeapCreate LeaveCriticalSection SetFilePointer SetHandleCount GetStdHandle InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess WriteFile GetModuleFileNameW GetModuleFileNameA WideCharToMultiByte GetEnvironmentStringsW TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime Sleep SetStdHandle GetConsoleCP GetConsoleMode FlushFileBuffers RtlUnwind HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage HeapReAlloc WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW CloseHandle CreateFileW

gdi32

SelectPalette GetCharABCWidthsA

Sharing